Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0442cf54-5f0f-3d01-b658-33f3d5234ee1.roa
File: 0442cf54-5f0f-3d01-b658-33f3d5234ee1.roa (raw, json)
Hash identifier: j/EFdfZHO+IYPRu/GSVpZ4gnZhYbXUR8OEk30XFqv0U=
Subject key identifier: 8A:5C:26:33:EF:20:F9:A9:47:02:D0:4D:7B:97:D2:26:F3:1F:1B:EA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A06C2065EF917DB75DFBF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0442cf54-5f0f-3d01-b658-33f3d5234ee1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.134.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:c2:06:5e:f9:17:db:75:df:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fbc8d1e5-a142-4046-a2eb-eb71d0d57ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:f8:5d:ba:1f:6c:d5:12:a0:ab:5e:43:55:
dd:e4:db:bc:0f:0d:71:db:98:4c:af:c4:90:d3:ff:
2d:32:32:ad:bd:dd:42:53:d8:c1:6c:0a:26:c4:6f:
5e:62:a3:1f:82:c6:1e:25:93:84:4b:e7:4e:13:db:
a2:d3:b7:ed:d6:75:9a:61:e2:14:74:25:41:df:e3:
91:37:33:23:2b:f1:a1:07:0c:40:4f:63:df:b7:98:
cf:2f:ce:ef:b8:3d:79:00:e4:46:ad:5a:65:ed:d3:
44:5e:74:92:da:0b:71:d5:01:18:d9:ad:07:aa:22:
36:ba:90:81:d8:e0:b4:e9:b1:f1:b5:39:c2:b3:24:
1d:af:ff:83:ec:1d:2d:74:60:33:da:59:b6:5f:4a:
cf:81:94:c1:0d:29:81:33:02:bb:30:09:3b:e7:5a:
d9:18:8a:12:aa:a5:86:f4:78:c1:df:af:b9:78:be:
38:4d:06:1f:b0:ac:e9:1e:6b:84:d3:65:db:9c:f3:
4b:74:cc:0e:cf:ae:ef:af:8b:f3:ff:12:98:b7:51:
57:6a:1f:4d:b3:e2:0a:95:75:3c:4a:6b:30:be:58:
9e:eb:5f:5b:66:4f:a7:38:10:fd:7e:b3:d7:45:77:
57:a0:e9:0a:c7:15:22:42:c6:4a:be:f3:51:d5:47:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:26:33:EF:20:F9:A9:47:02:D0:4D:7B:97:D2:26:F3:1F:1B:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0442cf54-5f0f-3d01-b658-33f3d5234ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:a4:f4:b6:38:b6:d6:86:bf:aa:ed:ae:5d:20:bc:a5:80:2e:
b6:57:2d:ba:4b:62:78:4d:90:ce:6b:2e:00:0a:d6:77:02:da:
19:7c:08:11:e9:b2:db:b8:c7:a9:69:60:32:65:16:77:ee:d6:
c3:f2:07:84:05:50:4d:7d:54:a4:2e:08:15:7f:55:d9:49:6b:
3e:79:e3:08:6a:cf:d9:98:1c:a9:e4:62:42:12:43:db:39:d1:
b9:93:7b:21:5b:12:49:c4:fd:6d:8b:dd:91:64:fb:f3:c8:3b:
2f:f3:77:8d:92:0d:80:37:36:64:c0:a2:18:6c:9f:84:ad:40:
ae:d0:48:d2:98:de:d5:e5:83:34:6d:31:db:bb:48:4d:48:54:
a7:0d:68:6a:74:c5:09:55:9b:f1:03:b2:79:d1:d1:d6:47:f9:
6d:fa:8d:fa:27:b0:a3:a9:42:87:73:79:59:73:bf:c5:37:f5:
08:55:f0:c8:32:72:8f:5c:87:fe:f5:b4:9b:1e:8b:3f:f0:b2:
fe:f7:6f:97:1a:48:1b:4c:1f:7a:c8:ae:76:43:92:17:b9:60:
23:fe:61:91:21:45:56:bf:cf:78:42:32:d1:56:04:7a:cb:57:
f9:f7:46:70:bb:c8:b1:13:f5:d7:53:be:27:7a:2a:af:e5:0e:
de:6f:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:04:04 2025 by rpki-client